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Society relies and depends increasingly on information exchange and communication. In the 
quantum world, security and privacy is a built-in feature for information processing. The essential 
ingredient for exploiting these quantum advantages is the resource of entanglement, which can 
be shared between two or more parties. The distribution of entanglement over large distances 
constitutes a key challenge for current research and development. Due to losses of the transmitted 
quantum particles, which typically scale exponentially with the distance, intermediate quantum 
repeater stations are needed. Here we show how to generalise the quantum repeater concept to the 
multipartite case, by fully describing large-scale quantum networks, i.e. network nodes and their 
long-distance links, in the language of graphs and graph states. This unifying approach comprises 
both the distribution of multipartite entanglement across the network, and the protection against 
errors via encoding. The correspondence to graph states also provides a tool for optimising the 
architecture of quantum networks. 

PACS numbers: 03.67.Dd,03.67.Bg,03.67.Pp 


I. INTRODUCTION 

Quantum entanglement is one of the pillars of quan¬ 
tum information processing. Distribution of entangle¬ 
ment among two or more spatially separated parties is 
a necessary ingredient for many tasks in quantum infor¬ 
mation theory, including distributed quantum comput¬ 
ing [T], blind quantum computing [2], teleportation [3], 
telecloning [4], secret sharing [5] and quantum cryptog¬ 
raphy schemes [ME]. Multipartite entanglement enables 
a violation of Bell inequalities that grows exponentially 
with the number of parties [9]. However, the controlled 
distribution of entanglement, in particular of multipartite 
entanglement, over long distances is a major challenge, 
due to unavoidable imperfections such as particle losses 
and decoherence. 

The seminal idea of quantum repeaters nni m is 
based on the distribution of short-range entanglement be¬ 
tween intermediate repeater stations (thus avoiding losses 
that grow typically exponentially with the distance) and 
subsequent entanglement swapping, which connects the 
short links along a line to long-range bipartite entangle¬ 
ment. Several theoretical variations have been proposed: 
some of them are based on entanglement distillation [ni^ 
[m and others are based on forward error correction [I5^ 
[TS] . Much experimental progress towards the realisation 
of a quantum repeater has been made p^ti25] . 

“Partially quantum” networks are considered in the 
so-called trusted node scenario [26] , while fully quantum 
networks have been investigated in the context of net¬ 
work routing [27H3Q] and coding [311132] strategies and 
heterogeneous network technologies [33] . 

Here we propose a general multipartite quantum net¬ 
work architecture, where the long-distance links are 
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bridged by quantum repeater stations. This idea is illus¬ 
trated in Fig. for the long-term vision of a “world-wide 
quantum web”. This network contains nodes (labelled 
by letters), which receive, measure and send particles. 
They could be located at, e.g., key institutions. Network 
nodes are connected by long-distance transmission chan¬ 
nels, which are subdivided into shorter channels by an 
appropriate number of quantum repeater stations - an 
example is also shown in Fig. 

Any network such as in Fig. forms a mathematical 
graph by identifying the network nodes with vertices and 
the quantum channels with edges. To any graph a cor¬ 
responding graph state can be associated [HIES]. These 
states are highly entangled and constitute a valuable re¬ 
source, e.g. for one-way quantum computation [34H38] . 
In our proposal the goal is to establish a multipartite 
entangled graph state between the network nodes. This 
goal is reached in two steps. Step 1: a graph state is pro¬ 
duced, where both the network nodes and the repeater 
stations constitute vertices. Step 2: the vertices corre¬ 
sponding to the repeater stations are “removed” by ap¬ 
propriate measurements. It is important to note that 
no memories are needed at the repeater stations, as the 
measurements can be performed immediately, as will be 
explained in more detail below. 

In order to deal with unavoidable errors, for exam¬ 
ple photon losses in fibres or in the atmosphere, quan¬ 
tum error correction will be used, i.e. the nodes and re¬ 
peater stations will process higher-dimensional encodings 
of physical qubits; we will use stabiliser codes throughout 
this paper. 

As the same language of stabilisers is used for both the 
encoding and the target states, our scheme of a global 
quantum repeater network is concise and general. 
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FIG. 1. Multipartite quantum network based on graphs: network nodes together with links between them constitute a graph. 
Both network nodes and repeater stations receive and send quantum particles. They prepare qubits (in the |+)-state), perform 
entangling quantum gates (Cz-gates) and measurements (in the X-basis). The number of such actions for a given node depends 
on its number of neighbours. Arrows indicate the transmission direction. Some examples are illustrated. Note that repeater 
stations have exactly two neighbours, while network nodes may have more than two neighbours. 


II. FROM GRAPHS TO QUANTUM 
REPEATER NETWORKS 

A mathematical graph G consists of a set U of A 
vertices and a set E of edges, each of which connects 
two vertices, i.e. E C V x V. In Fig. the network 
nodes as well as the repeater stations are vertices, and 
all transmission channels between them are edges of a 
graph. To each mathematical graph G corresponds a 
graph state |G), which can be defined in two equivalent 
ways. First, a graph state can be physically produced by 
switching on a specific entangling gate for each edge of 
the graph. Concretely, \G) is the state that is created 
from the state |+)^^, with |+) = ^(1^) + l^))? ^P" 

plying a controlled-phase gate Gz to each pair (i, j) of 
vertices in F, i.e. 

iG)= n (1) 

iid)eE 

where in the computational basis {|00), |01), |10), |11)} 
the entangling gate reads Gz = diag{l^ 1,1, —1). 

Second, a graph state is the unique state which is eigen¬ 
state of a set of so-called stabiliser operators, with eigen¬ 
values +1. Each vertex i of the graph has an associated 
stabiliser operator gi which is a product of the Pauli-A 
operator for vertex i and the Pauli-Z operator for all its 


neighbours, i.e. gi reads 

gi=Xi n (2) 

jev 

{hj)eE 

Here, Xi is a short-hand notation for the Pauli operator 
X acting on vertex i and the identity 1 at all other ver¬ 
tices. The graph state \G) is defined via the eigenequa- 
tions gi\G) = |G), for all i E V. Note that a product of 
stabiliser operators is also a stabiliser. 

In order to present our main idea, let us first describe 
the two mentioned steps. In step 1, a graph state ac¬ 
cording to the graph in Fig. [^is created: for the simple 
line graphs, which constitute the long-distance links, each 
repeater station receives one qubit from the previous sta¬ 
tion, produces one qubit in state |+), entangles it with 
the qubit from the previous station via a Gz gate and 
then sends the second qubit through the channel to the 
next repeater station, which acts in the same way. Thus, 
the edges between repeater stations are created. The net¬ 
work nodes act in a slightly different way: depending on 
their number of neighbours, they receive a certain num¬ 
ber of inputs, create a certain number of qubits in state 
|+), perform entangling Gz gates, and send on the ap¬ 
propriate number of qubits to the neighbouring repeater 
stations. Some examples are given in Fig. Thus, the 
whole graph of Fig. [^will be produced. 

In step 2, the vertices corresponding to all repeater 
stations are removed by a simple Pauli A-measurement 
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at each repeater station. The reasoning is as follows: re¬ 
member that a product of stabilisers is also a stabiliser. 
Consider the vertex S (South Africa) in the quantum net¬ 
work shown in Fig. and assume that the number of re¬ 
peater stations is even on each edge (odd numbers can 
be treated in an analogous way). Take the product of 
the stabiliser generators starting from S and for every 
second repeater station, until reaching the neighbours T, 
M, P, I, and R. Due to the definition of Qi in equation ([^ 
and the fact that = 1, this product of stabilisers con¬ 
tains only X-operators at S and the mentioned repeater 
stations, and Z-operators on the neighbouring network 
nodes of S in the network (see also [39]). We call this 
stabiliser operator the main stabiliser centred on S. Mea¬ 
suring all repeater stations in the X-basis projects the 
state onto one stabilised by :^XsZtZm^p^iZr in the 
Hilbert space of the network nodes only. Here the sign 
of the stabilizer operator depends on the parity of the 
measurement outcomes of the repeater stations included 
in the main stabiliser centred on S. The minus sign can 
be removed by applying the so-called by-product opera¬ 
tor Zs in this case. This reasoning holds for all network 
nodes. By comparison of the obtained stabilisers with 
equation <§ it is clear that the graph state correspond¬ 
ing to the global network (large vertices in Fig. has 
been produced. 

Even though we have explained the procedure in two 
consecutive steps, it is not necessary to store the full 
graph state: as the local measurements commute with 
the operations on other repeater stations, a qubit can be 
measured immediately after action of the Cz gate, which 
is easier to realise experimentally. Thus, the whole graph 
state between network nodes is gradually built up in a 
one-way fashion, as explained in Fig. without need for 
memories in the repeater stations. 

In an implementation of the above scheme, losses in 
the transmission channels, noise in the gates as well as 
errors in preparation and measurement will occur and 
would lead to a low-quality output state. As a solution to 
this problem, quantum error correction can be employed: 
The main idea is to encode the state of a so-called logical 
qubit redundantly into many physical qubits, such that 
a local error leads to a unique error syndrome and can 
be corrected by applying a suitable operation [40|. This 
is in contrast to previous ideas [41] where graph states 
were used as resource states for measurement-based im¬ 
plementations of quantum error correction. 

In the present article we make use of so-called stabiliser 
codes [42] , which are defined via a set of stabiliser opera¬ 
tors, the eigenstates of which (with eigenvalue 1) are the 
codewords. In particular, we focus here on a subclass 
of stabiliser codes, the Calderbank-Shor-Steane (CSS) 
codes [40] which have the useful property of “transver¬ 
sal” logical entangling gates (see Appendix]^. Thus the 
only change in our scheme is that instead of initial phys¬ 
ical qubit states |+) multi-qubit encoded logical states, 
denoted in the following as |+), need to be generated. 
The specific structure of |+) depends on the chosen error 
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FIG. 2. Repeater station with encoding: encoded state 
preparation, action of gates and measurements on physical 
qubits correspond to the equivalent short-hand notation of 
actions on logical qubits, denoted by a bar. 


correction code. Low-error state preparation can be done 
more efficiently than general quantum operations on an 
unknown state, see e.g. [43] for a preparation scheme 
for the quantum Golay code [44ll46] . The repeater op¬ 
eration in the encoded case and the short-hand notation 
1+) and Mx for the measurement on the encoded state 
is illustrated in Fig. 


III. ERROR ANALYSIS IN THE GRAPH 
LANGUAGE 

The unified description of the quantum network in 
terms of stabilisers for both the states and the encoding 
allows for a comprehensive analysis of errors and perfor¬ 
mance study. An error can be noticed, in the sense that 
it is known which qubit is affected (e.g. a no-detection 
event), or unnoticed (noise). For our performance study 
we will use the usual exponential loss model in optical 
fibres, i.e. the failure probability during transmission 
is given by 


/T = l-(l-/c)e-^°/^“«, (3) 

where fc is a coupling failure probability, Lq is the dis¬ 
tance between repeater stations and Latt is the atten¬ 
uation length of the fibre, for which we will use the 
value I/att = 20 km. All qubit errors (for sources, gates, 
channels, detectors) will be modelled by the depolarizing 
channel, characterised as 

(1-/)P + /^1, (4) 

i.e. with a failure probability / the state of the qubit is 
proportional to the identity, and with probability (1 — /) 
it is unaffected. Thus in case of failure the state is depo¬ 
larized to the completely mixed state. The same effect is 
achieved by randomly applying bit-flips and phase-flips 










































4 



FIG. 3. Error propagation through a graph state repeater 
line: All possible sources of an error at repeater station i are 
shown. Here, ’?’ denotes noticed errors and denotes unno¬ 
ticed errors. The measurement outcome at repeater station i 
is marked as ’ ?’ in case of a noticed error, and may be flipped 
in case of an unnoticed error. 


to the state. This mathematically equivalent viewpoint 
of a perfect operation followed by discrete X and Z errors 
is very convenient m- 

When a physical X oy Z error has occurred, it propa¬ 
gates via the gates through the network, i.e. it may in¬ 
fluence the consecutive qubits and measurement results. 
However, fortunately the spreading of errors along a re¬ 
peater line is restricted to a finite length, concretely to up 
to two repeater stations. This is due to some simple rules 
for error propagation via a Cz gate: a Z error that occurs 
on one of the two input qubits of a Cz gate remains a 
Z error on the corresponding output qubit and does not 
affect the other output qubit. An X error that occurs on 
one of the two input qubits remains an X error on the 
corresponding output qubit, but also causes a Z error 
on the other output qubit. (If more than one error has 
occurred, the output qubits will suffer from correspond¬ 
ing products of errors.) An X or Z error may therefore 
be spread to the next repeater station, where the corre¬ 
sponding qubit will pass through the next Cz gate and 
then will be measured. Regarding the measurement, an 
X- (Z-)error before an X- (Z-)measurement does not 
affect the measurement outcome, while an X- (Z-)error 
before a Z- (X-) measurement flips the measurement out¬ 
come. 

The possible sources of errors are shown in Fig[^ It 
is important to note, due to the arguments given above, 
that repeater station number i is only influenced by er¬ 
rors propagating from nearest and next-to-nearest neigh¬ 
bours, i.e. from stations (i — 1) and (i — 2). 

If an error is noticed, the corresponding measurement 
outcome is set to “?”. The physical error rate depends 
on the failure probabilities for transmission, gates and 
measurements and is explicitly calculated in Appendix [B| 

In Fig. we focus on the physical error rates along 
a repeater line. The generalisation of our analysis to 
more gates and more qubits in the case of the network 
nodes is straightforward and can be described in terms of 
the vertex (in- and out-)degree, see Appendix [D| Note, 
however, that in a large-scale quantum network there are 
many more repeater stations than network nodes. Thus 
the performance of the network mainly depends on the 


error rate at the repeater stations, which was described 
above. 

Up to now we have described the physical errors. For 
a given encoding the logical error rate, i.e. the rate of 
uncorrect able errors, is a function of the physical error 
rate, see Appendix [C] 

Remember that the (logical) measurement outcomes 
at the repeater stations of the main stabiliser centred on 
a node v determine whether the by-product operator Zy 
needs to be applied. Thus even numbers of logical errors 
on the corresponding repeater stations cancel each other. 
The local error rate at the vertex v is an important in¬ 
dicator of the quality of the produced state. The formula 
to calculate follows the previous reasoning and is given 
in Appendix The error rates Cy effectively combine all 
errors of the repeater stations and simplify the analysis 
considerably. The stabiliser error rates allow to bound 
the fidelity of the established state, see Appendix [A| 

IV. PERFORMANCE AND QUANTUM 
NETWORK ARCHITECTURES 

The performance of a quantum network may depend 
on the task it was built for: possible figures of merit are 
e.g. the rate for the production of a long-distance en¬ 
tangled state, the success probability for a task such as 
quantum teleportation, or the secret key rate in a cryp¬ 
tographic setting. In the following we will use as figure of 
merit the cost-performance ratio C which compares the 
needed resources HU: It is defined as the total number 
of needed qubits divided by the total distance L and a 
specific quality factor Q, i.e. 


LQ^ 

where n is the number of qubits per station (neglecting 
preparation overhead) and w is the number of repeater 
stations. Our description in the graph state language 
provides a tool to optimise the architecture of a quan¬ 
tum network: two graphs G and G' with the same set of 
vertices V but different sets of edges E ^ E' may cor¬ 
respond to local-unitary equivalent graph states |35], i.e. 
states that are related by local basis changes. This fact 
leads to general optimisation arguments for quantum net¬ 
works; we now consider only network nodes as vertices 
and their connecting repeater lines as edges, which have 
a weight according to the number of repeater stations on 
this line. 


1. The graph G' can have fewer edges than G. This 
corresponds to a reduced numb er of repeater lines 
in a network, see e.g. Fig. |4(a)' 


2. The graph G' can h ave less cycles than G, see e.g. 
Fig. |4(a) and |4(c)| Note that in general cycles 
increase the required coherence time of the used 
quantum memories at the network nodes, because 





























5 



200 400 600 800 


200 400 600 800 


X in km 


X in km 


(a)The network with a cycle on the left produces the same final state as the network without cycle on 
the right (up to local basis transformations). 
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(b)While both networks have the same number of links and show comparable performance (in terms 
of the error rates of the final state), the right requires less repeater stations. 
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(c)The left network requires less repeaters, because the total length of the repeater lines is shorter. 
The right network, however, has a better performance in terms of the error rates, because the 

maximal vertex degree is lower. 


FIG. 4. The left example networks are local-unit ary-equivalent to their right hand side counterparts. Despite producing the 
same final state up to local basis transformations, these networks can differ in their performance and cost. For all figures a gate 
error rate of /g = 1 x 10“^ has been used. The number of repeater stations on each link minimizes its cost-performance ratio 
C and is shown as the edge weight. The resulting error rates at the network nodes are shown in the box next to the network. 
They are approximately proportional to the corresponding vertex degree, because all links introduce roughly the same amount 
of errors (as a result of the optimization w.r.t. the cost-performance ratio C). 


the qubits need to be stored until all gates have 
been applied to them. 

3. The total length of the edges in E and E' may 
differ, even if the numb er of edges of G' and G are 
equal, see e.g. Fig. |4(b)] One can thus minimize the 
total number of repeater stations in the network. 


4. The maximal vertex degree of G and G' may be dif¬ 
ferent. Given that the number of repeater stations 
is optimized w.r.t. G for each individual edge, the 
rate of errors increases with the vertex degree (see 
Appendix]^. Thus it can be advantageous to re- 
duce the maximal vertex degree, see e.g. Fig. 4(c)| 
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In order to illustrate the general performance of a graph 
state quantum repeater and to compare different codes 
we consider in the following a bipartite setting, i.e. one 
repeater line. This is a typical quantum cryptographic 
scenario, and therefore we use as the quality factor Q in 
the cost-performance ratio C the effective secret fraction 
i?, given by 

R — -fsucc^oo (b) 

where Pgucc denotes the probability for not aborting of 
the protocol (one might choose to abort in case of a “fa¬ 
tal” pattern of noticed errors in order to increase the 
quality of the produced state), employing a given code. 
The factor r^o is the secret fraction for the BB84 proto¬ 
col, given by [48] 

Too = max{l - h{eA) - Hcb), 0}. (7) 

Here, ca and cb are the error rates of the two 
end nodes, and the binary entropy is defined as 
h{p) = -plog 2 (p) - (1 -p)log 2 (l -p). Note that 
and cb depend on the logical error rate of the error 
correction code: a logical measurement error remains, 
if the outcomes are decoded to a codeword with wrong 
parity. 

We optimized the cost-performance ratio C with re¬ 
spect to the number of repeater stations w for differ¬ 
ent L for several codes. The optimal separation distance 
of the repeater stations decreases with increasing total 
distance. Note that the number of repeater stations in 
Fig. g i.e. the optimal weight of the long-distance edges, 
was also calculated using this bipartite figure of merit for 
each edge. For a comparison of various encoding schemes 
with the original repeater see Figure For distances 
larger than about 800 km, the Golay code outperforms 
all previous approaches. With our methods, this type 
of comparison can now be performed for any quantum 
network architecture and any quantum information pro¬ 
cessing task, using a corresponding figure of merit for the 
quality factor Q. 

V. DISCUSSION 

Establishing a large-scale entangled quantum state is a 
formidable future task. In our proposal of a graph state 
quantum repeater network this task finds a unified de¬ 
scription in the elegant language of stabilisers. Though 
being of abstract mathematical origin, this approach al¬ 
lows to quantitatively evaluate and compare different im¬ 
plementations of any quantum network. For given quan¬ 
tum hardware such as sources, transmission channels. 


gates and detectors, a suitable error correction code can 
be found, and the performance for quantum information 
processing protocols such as e.g. secret key generation 
between two or more parties can be determined. 

For fixed locations of participating parties, our method 



FIG. 5. Comparison of the cost-performance ratio C for sev¬ 
eral codes: Encoding via the Seven-Qubit Steane code (red), 
the 23-qubit quantum Golay code (yellow), and the (here up 
to 84-qubit) quantum parity code of [18] (green), compared 
with the original (distillation based) scheme [TOl [4^ (blue). 
The gate failure rates are fc = 10“^ (dashed) and fc = 10“^ 
(solid). The grey line corresponds to using no repeaters. The 
comparison with the original scheme assumes measurement 
times of 10 ps. 


of resources and performance with respect to a specific 
task (e.g. cryptography or synchronisation of distributed 
clocks [Ml ED). Exploiting local unitary equivalence of 
different quantum networks has no classical counterpart 
and deserves further detailed investigations. Euture re¬ 
search on quantum networks will benefit from the pre¬ 
sented description in the stabiliser formalism. This in¬ 
cludes in particular the analysis of the efficient use of the 
whole network infrastructure to produce entangled states 
shared by a subset of parties. While we showed that the 
performance of the 23-qubit quantum Golay code is out¬ 
standing for large distances, further research may focus 
on smaller codes for smaller networks. 
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(A 2 ) 


Appendix A: Logical graph states 


An [[n,error correction code encodes k logical 
qubits into n > k physical qubits. This redundancy 
guarantees the correction of up to single qubit 

errors or d — 1 erasures. Note that erasures, marked in 
the classical data as are not only caused by losses 

of qubits at that particular position. In the scheme 

described in the main text, any noticed error on the 
qubit i or i — 1 will lead to an erasure of the measurement 
outcome at position i. 

Let S denote the stabiliser group of the 

codespace of a stabiliser code. Furthermore let 

denote logical X- and 

Z-operators. These operators are elements of the 
normaliser of S but not elements of S and fulfill 

while operators on different 
logical qubits commute. For simplicity we focus on the 
k = 1 case and drop the label of the logical operator. In 
analogy to a graph state, we define a logical graph state 
associated with a graph G = {V^E) as the unique state 
|G) that is stabilised by operators 


gi=Xi n Z,.. (Al) 

jev 

iid)eE 


This definition can be generalized to k > 1 which leads 
to k copies of the graph state. 

A logical error e occurs when the recovery operation leads 
to a wrong codeword e|G) 7 ^ G. This can happen if more 
errors occurred on one block than the code is able to 
correct. A logical measurement error occurs if e anti¬ 
commutes with the observable. One assumes that the 
probability of (unnoticed) errors fu and erasures fn are 
the same for all physical qubits. Then for any quantum 
error correction code, the probability of a logical error fu 
is a function of fu and fn- It is possible to retry the pro¬ 
duction on a particular pattern of noticed errors. Thus 
the function fu{fu^ fn) depends on the error correction 
code and the strategy of when to abort. Several exam¬ 
ples are given in Appendix [C) 

Given the probability of logical measurement errors at 
each vertex it is straightforward to calculate the logical 
error rate at the position of the network nodes. For each 
main stabiliser Si centered on party i, the applied by- 
product operator Zf" ^ depends on all X-measurement 
outcomes Xj of the qubits included in the main stabiliser 
(i.e. the qubits on which it acts non-trivially). These are 
half of the qubits on the links from and to party i, i.e. 
I ^jev ’ where Wij is the number of repeater stations 
on the link Even numbers of logical errors cancel 


each other and the stabiliser error rate is 

I 


= tr p 






pZi n zf \G){G\Zi n 


^k' 


kev 

V 


k'ev 

k'^i 


Podd I fuifu^fn)^ 2 ^ V j ’ 

V / 

where is the k-th binary digit of n and 
Podd(/,iV) = i(l-(l-2/)^). 


(A3) 


(A4) 


(A5) 


Suppose that the state produced by the quantum net¬ 
work is given by a density matrix p. An error on any 
stabiliser implies the production of a state orthogonal to 
the target state |G). Note that it suffices to consider only 
Z errors, as the effect of X-errors can be described with 
Z errors due the stabilisers of the graph state. One can 
thus immediately gain bounds on the fidelity of p with 
respect to the state |G) from the local error rates e^. 


1 — ^ Cy < (G|p|G) < 1 — maxle^ji; G E}. (A 6 ) 

For the network given in Fig. |4(b)] these bounds evaluate 
to 94% < (G|p|G) < 99%, for example. 


Appendix B: Error propagation through repeater 
stations 

Calderbank-Shor-Steane (CSS) codes allow the 
transversal implementation of controlled-NOT gates m- 
A transversal application of a quantum gate on two 
blocks of an [[n,quantum error correction code is 
the qubit-wise application of the gate, i.e. n gates act in 
parallel on the i-th qubit of block one and the Tth qubit 
of block two, i = l,2,...,n, see Fig. By using two 
alternating codes in the X- and Z-basis on alternating 
qubits, the transversal application of the controlled-NOT 
gates acts like a logical controlled-phase gate and we 
can stick to the language of graph states. Because only 
transversal gates are applied in the quantum circuit, it 
suffices to calculate the physical error rate by considering 
the first qubit of each block only. We start by calculating 
the unnoticed error rate fu for a repeater station, i.e. 
the probability to get a flipped measurement outcome. 
Notice that two errors of this kind cancel each other. We 
collect all independent sources of errors that lead to the 
error pattern under consideration (e.g. “flipped outcome 
at position E ) into a vector p. Then the probability for 
this error is 

2^-1 N 

fu = PoM{p)= l[pEd-PkV~""‘\ (Bi) 

n=0 k=l 
\n\H odd 
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where is the k-th binary digit of n. In case of the such c with equal probability. We use it for the 7-qubit 
repeater stations the error sources correspond to Steane code and use a fatal error set T of the form 



fp,n + fp,u 
2 


Podd 



odd 




(B2) 


Here we included noticed/unnoticed errors for prepara¬ 
tion (/p,n/n), transmission {fr^n/u), gates {fc^n/u) and 
measurement {fM.n/ u)' Remember that Podd{f^N) was 
defined in equation (A5). In order to identify the pro¬ 


cesses that contribute to fu one checks all possible prop¬ 
agations of errors to a Z-error on the qubit i under con¬ 
sideration. It is useful to note that only X-errors spread 
to Z-errors on adjacent qubits in a Cz gate. 

Please note that we have neglected the difference of the 
physical error rates for qubits at the boundary of a re¬ 
peater line and “typical” qubits. This is motivated by 
the fact, that in a large-scale quantum network there are 
many more repeater stations than parties. Incorporating 
these boundary effects is however straightforward. 

We assume that noticed errors do not cancel each other. 
Again we collect all independent sources of the error un¬ 
der consideration. In contrast to the case of fu, fn de¬ 
notes the probability that any of these events occurred. 
Thus the probability for an error of this type is 


fn = l-{l-fp,nfd-fG,nf{l-fT,nfd-fM,nf- (B3) 


T = {e|e contains more than nmax losses}, (C3) 


where n^ax ^ he. the protocol is aborted if more 
than nmax losses occurred. The error rates of the 7-qubit 
Steane code listed in Table |T] were obtained by imple¬ 
menting equation (Cl). 


Appendix D: Generalization of the error analysis 

Given a graph G = {V^E) with vertices V and edges 
E. The state \G) is stabilised by the generators of the 
stabiliser gi {i = 1,..., |T7|).The repeater network that 
creates the graph state \G) is obtained by replacing each 
edge (i,jf) in £’ by a line graph with Wij additional ver¬ 
tices (the repeater stations). Let us assume that Wij is 
even, for simplicity. All repeater stations are measured 
in the X basis. This projects onto a state that is sta¬ 
bilised by the gi up to byproduct operators that depend 
on the measurement outcomes. Thus after application of 
the byproduct operators gi\G) = \G) holds. A flip of one 
measurement outcome on the i-th main stabiliser {gi con¬ 
nected by chains of X-operators) leads to gi\G) = — \G). 
The same holds for X errors on the neighbors of party i 
or a Z error on the qubit of party i. The corresponding 
error probability is fi. We denote the probability for the 
wrong sign in the stabiliser equation of gi by e^. It is 


Appendix C: Logical error rate of some CSS codes 

In order to calculate the secret key rate for a specific 
encoding, we need the error rates on odd and even logi¬ 
cal qubits. The decoder assigns a codeword to any word 
given by the measurement, i.e. to the true outcomes al¬ 
tered by the error pattern. This recovered codeword is 
used to calculate the value of the logical observable. If 
this recovered value is different from the “true outcome” 
this word of measurement outcomes contributes to the 
logical error rate. The decoder may trigger an abort on 
any error from the set E. The naive approach to calcu¬ 
lating this rate thus is 


/«,c(/«,/n) = ^E/(e)Pe(e), (Cl) 


— Podd I I -^odd I fu-! ^ ^ '^ij 1 5 /i:/j | (L J^ 


(Dl) 

In analogy to equations (14) and (16) of the article one 
can estimate the error rate 


fi,u —-Podd ( ( Podd 

Podd 


fp,u 

Z *1 -L 


, 1 + deg (i) , 


fp,n T fp,u T I 

^-^,deg^(2) , 


Podd ( + deg(i) ) , 


odd 




, 1 + deg (i) , 


/m,i 


(D2) 


where Pe(e) is the probability of the error e and /(e) is 
the number of logical errors after decoding. The success 
probability depends on T and reads 

Psucc = ^ Pe(e) = 1 - ^ Pe{e). (C2) 

Let us consider a decoder that returns the most likely 
codeword c in the sense that an error pattern e that 
changes c to the observed data has maximal probabil¬ 
ity Pe(e). If this is not unique the decoder chooses any 


and 

=1 - (1 - 

(1 - 

where deg(i), deg~(i), and deg^(i) are the degree, in¬ 
degree, and out-degree of vertex i, respectively. From 
these physical error rates one can calculate the logical 
error rate in analogy to fu, i.e. fi = fu{fu = fi,ujn = 

fi,n)- 
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fu{fu, fn) — 
-Psucc(/n) — 

fuifujn) = 
-fsucc(/n) — 

fuifui fn) — 
Psucc^fn) — 

fuifujn) = 


c(/n) = 


fuifujn) = 


Psuccifn) — 
fuifui fn) — 


Psuccifn) — 
fuifujn) = 


c(/n) = 


fuifui fn) — 


cifn) = 


TABLE L Logical error rates of the Steane code 
7-qubit Steane code (rimax = 0) 

{fn - if fl (48/^ - 168/^ + 252/3 - 210/^ + 98/„ - 2l) 

(1 - fnf 

7-qubit Steane code (umax = 1) 

{fn - 1)® fu (48 (/„ - 1) ft - 168 (/„ - 1) ft + 252 (/„ - 1) ft - 210 (/„ - 1) ft 
+14 (9/„ -7)ft + 21 (1 - 3/„) fu + 21 fu) 

{fu - 1)® (6/„ + 1) 

7-qubit Steane code (rimax = 2) 

{fn - 1) (48 {fn - 1) V® - 168 {fn - 1) Vu + 252 {fu - 1) ^ft - 210 {fn - 1) Vu 

+ 14 {fu (3/„ - 16) +7)ft+ 21 {fn (3/n + 4) - 1) A - 21/n (2/„ + 1)) 

“ {fn “ 1) ® (l5/^ + 5/n + l) 

7-qubit Steane code (rimax = 3) 

I {fn - 1) ^ {ft {96ft - 336/3 5Q4_^5 _ 430/4 gQg/S _ 310/2 + 84/„ + 7) 

-2ftfu (144/3 _ 504/5 750/4 _ ggo/S ^QQft - 21/„ - 2l) 

+2fnfu (i 44/3 - 504/3 750/4 _ ggo/S 333/2 _ ^qs/^ + 21) 

+2ft (-48/5 + 168/^ - 252/3 + 210/" - 98/„ + 2l)) 

(/„-l)q20/3 + 10/2+4/„ + l) 

7-qubit Steane code (rimax = 4) 

1 { f„ - 1) 3 {3ft {32ft - 112/3 ^ ^gg^5 _ ^40/4 ^ g4/3 _ 43^2 ^ ^4^^ _ 7) 

-ft {S84ft - 1344/3 + 2016/5 - 1680/^ + 840/3 - 252ft + 42/„ + 7) 

+12/2/2 (4g^6 _ ^gg^4 ^ 252ft - 210ft + 98fu - 21) 

-6fnfu (64/3 _ 224^5 ^ 330^4 _ 330/8 ^ 140/2 _ 43/^ ^ 7) 

+2/2 (48/5 - 168/^ + 252/3 - 210/2 + 98U - 21)) 

~16ft + 35/3 _ 21/5 _|_ 

7-qubit Steane code (rimax = 5) 

1 {fu - 1) ' {6ftfn {16ft - 56/5 ^ 34^4 _ 70/3 ^ 43^2 _ + 7) 

-2ft {240ft - 840/3 + 1260/5 - 1050/^ + 546ft - 189ft + 42U - 7) 

+/» (960/: - 3360/: + 5040/: - 4200/^ + 2016/: - 504ft + 42U + 7) 

-6ftfu (160ft - 560/: + 840/: - 700/: + 836ft - 84fu + 7) 

+2fnfu [240ft - 840ft + 1260/: - 1050/: + 518/: - 147/„ + 2l) 

+2ft {-48ft + 168ft - 252ft + 210ft - 98fu + 2l)) 

6 ft -7ft + l 


7-qubit Steane code (rimax = 6) 

ft (48/: - 168/: + 252ft - 210ft + 126ft - 63ft + 21/„ - |) 

-f/: {2fu - 1) 5 (4ft - 8ft + 6ft - 2fu + 1) 

+ fft {2fu - 1) 5 (12/: - 24ft + 18ft - 6fu + 1) 

-105/:/„ (2/„ - 1) 3 {2 ft - 4ft + 3fu - 1) + I ft {2fu - 1) 5 (60 ft - 120 ft + 90 ft - 30/„ - l) 
-63ftfu {2fu - 1) 5 {2ft - 4ft + 3fu - 1) + 21/„/„ (2/„ - 1) ^ {2ft - 4ft + 3/„ - l) 

+/: (- 48 /: + 168 /: - 252ft +210/: - 98 /„+21) 

1-ft 


7-qubit Steane code (rimax = 7) 

3ft {2fu - 1) 3 {2ft - 4ft + 3ft -fn + 1)- fft {2fu - 1) 3 {4ft 
+ fft {2fn - 1) 3 ( 12 /: - 24/: + 18ft - 6fu + 1) - 105/:/„ {2fu 
+ lft {2fn - 1) 3 (60/: - 120/: + 90ft - 80fu - l) - 63ftfu {2fu 
+21fnfu {2fu - 1) 3 {2ft - 4ft + 3fu - 1) + ft (-48/: + 168/: - 
1 


- 8ft + 6ft - 2fu + 1) 
-1)3(2/:-4/: + 3/u-1) 

- 1) 3 {2ft - 4ft + 3fu - 1) 
252ft + 210/: - 98fu + 21) 
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TABLE IL Logical error rate for the Golay-Code 
Golay code [46] assuming 


23{U + fu-l)f^ 


if 

fu{fu,fn) — 2 ( ~ 4096 2048 

I 33649 // I / 1 \ 5 p18 


2W( 

■ 3 VV 


(/n + /n — 1) fn ~ 


253(fn+fu-^) fn I 1771/^ I ^ 1^3^20 8855 /^ , ^ 1 ^ 4 

1024 512 Jn 256 "1" Ju Jn 

100947 ( f I / 1 \6/17 


{fn + /n — 1) fn + 


64 VJri I jn Jn 1 30 


+ 101200 (/n + /n-l)Vn 
1 ) 


+ W ifn- 1) {fn +fu-l) ®/y - 272734 {fn + /, 

+ 

1 ) 


{fn +fu-l) - 30613 {fn +fu-l) ^ff 
f^{fn-l){fn+fu~irff^ 


+560924 {fn + fu-l) “/y + {fn - 1) {fn + fu ~ 1) ff^ - 695520 {U + U - 1) 

I 11 rii 


-319424 {fn - 1) {fn + fu-l) “/y + (/u + A - 1) “ (-/u + 2fn + 1) /y 

+949256 {fn - 1) {fn + fn-l) f^° - 97405 (/, + fu - 1 ) {-fn + 2A + 1) /y 
+779240 {fn + /u — 1) {—fn + 2/u + 1) /n + 18975 {fn + /u — 1) {—fn + 6fu + 1) fn 

-485760 {fn +fu-l) {-fn + 6fu + 1) /* - 2277 {fn + fu - 1 ) {-fn + 14A + 1) /« 

+32384 {fn + /u — 1) (~/ri + 14:/u + iLn + {fn ~ 1) {fn + /u — 1) ("“/ri + 14:/u + 1) 

+212520 {fn +fu-l) (- {fn - 1) " + lOA {fn - 1) + 8/^) /:^ 

-100947 {fn - 1) {fn + fu-l) (-/n + 14/u + 1) /® 

-28336 {fn +fu-l) {-fn + 2A + 1) (-/n + 14/„ + 1) fl 
-5313 {fn + A - 1) {{fn - 1) " - 15A (/u - 1) + 30/y fl 

+8855 {fn + A - 1) {{fn - 1) " - 17A {fn - 1) + 90/2) 

-1771 {fn + A - 1) ((/n - 1) " - 17A (/„ - 1) 2 + 138/2 {fn - 1) + 96/^ /^ 

-253 {fn + fu-l) (- {fn - 1) " + 18/„ (/, - 1) 2 - 171/2 {fn - 1) + 90/^) f^ 

+23 {fn +fu-l) (- {fn - 1) " + 19fu {fn " 1) " - 190/2 {fn - 1) + 560/^) fn + {fn + fu - 1) "" 


P — 1 

-1 SUCC - -L 


-23/„ {fn + /„-!)""+ 253/2 {fn + /„ - 1) 21 - 1771/3 {fn +fu-l)^° + l) 









